THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-44893 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex()

[NVD] CVE-2026-44893 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex()

lownvdPublished 2026-06-12

CVE-2026-44893 CVSS: 7.5 HIGH Published: 2026-06-12T15:16:26.103

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), length)` and only then reads the 1-byte client field

Indicators of compromise

CVE-2026-44893cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44893